What measures can a hospital do to ensure they are not liable for the individual acts of a contracted physician?